From 11d23595e8869f50a519d880fc66574c810574aa Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 13 Apr 2022 03:31:41 +0000 Subject: [PATCH] fix: Gemfile.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623 - https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898 --- Gemfile.lock | 29 ++++++++++++----------------- 1 file changed, 12 insertions(+), 17 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index c08c1154..75c73d2a 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -3,7 +3,7 @@ GEM specs: addressable (2.4.0) ast (2.4.0) - backports (3.16.1) + backports (3.23.0) bcrypt_pbkdf (1.0.1) berkshelf (6.3.4) buff-config (~> 2.0) @@ -93,11 +93,6 @@ GEM term-ansicolor (~> 1.3) thor (~> 0.19.1) tins (~> 1.6) - cucumber-core (3.2.1) - backports (>= 3.8.0) - cucumber-tag_expressions (~> 1.1.0) - gherkin (~> 5.0) - cucumber-tag_expressions (1.1.1) diff-lcs (1.3) docile (1.1.5) ed25519 (1.2.4) @@ -116,10 +111,9 @@ GEM fauxhai (4.1.0) net-ssh ffi (1.12.2) - ffi-yajl (2.3.3) - libyajl2 (~> 1.2) - foodcritic (16.2.0) - cucumber-core (>= 1.3, < 4.0) + ffi-yajl (2.4.0) + libyajl2 (>= 1.2) + foodcritic (16.3.0) erubis ffi-yajl (~> 2.0) nokogiri (>= 1.5, < 2.0) @@ -134,7 +128,6 @@ GEM multi_json (~> 1.0) net-http-persistent (~> 2.9) net-http-pipeline - gherkin (5.1.0) gssapi (1.3.0) ffi (>= 1.0.1) gyoku (1.3.1) @@ -154,7 +147,7 @@ GEM kramdown (1.17.0) launchy (2.4.3) addressable (~> 2.3) - libyajl2 (1.2.0) + libyajl2 (2.1.0) license-acceptance (1.0.13) pastel (~> 0.7) tomlrb (~> 1.2) @@ -168,7 +161,7 @@ GEM kramdown (~> 1.12, >= 1.12.0) mixlib-cli (~> 1.7, >= 1.7.0) mixlib-config (~> 2.2, >= 2.2.1) - mini_portile2 (2.4.0) + mini_portile2 (2.8.0) minitar (0.9) mixlib-archive (0.4.20) mixlib-log @@ -201,8 +194,9 @@ GEM net-ssh-gateway (>= 1.2.0) net-telnet (0.1.1) nio4r (2.5.2) - nokogiri (1.10.8) - mini_portile2 (~> 2.4.0) + nokogiri (1.13.4) + mini_portile2 (~> 2.8.0) + racc (~> 1.4) nori (2.6.0) octokit (4.16.0) faraday (>= 0.9) @@ -234,9 +228,10 @@ GEM pusher-client (0.6.2) json websocket (~> 1.0) + racc (1.6.0) rack (2.2.2) rainbow (3.0.0) - rake (13.0.1) + rake (13.0.6) retryable (2.0.4) rexml (3.2.4) ridley (5.1.1) @@ -354,7 +349,7 @@ GEM launchy (~> 2.1) pusher-client (~> 0.4) typhoeus (~> 0.6, >= 0.6.8) - treetop (1.6.10) + treetop (1.6.11) polyglot (~> 0.3) tty-box (0.5.0) pastel (~> 0.7.2)